Description
In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Progress Software | Telerik Report Server | 1.0.0 – < 10.3.24.1112 | 10.3.24.1112 |
Advisories 1
- WID-SEC-2024-3460 Progress Software Telerik Report Server: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Nov 13, 2024